Anti-diffusion method based on government purchase archive digitization
By generating encrypted offline data packets and unique document decryption methods on the government procurement electronic archive management platform, the problem that traditional secondment methods cannot effectively manage and control government procurement electronic archives is solved, and document security and information security are guaranteed.
Patent Information
- Application Number
- CN202311018378.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-08-14
- Publication Date
- 2025-02-21
AI Technical Summary
Traditional government procurement of electronic archive secondment methods cannot effectively limit and manage seconded documents, and there is a risk of proliferation and leakage, and there is no control over reading period and authority.
Through the government procurement electronic file management platform, after the secondment applicant applies to download the document, an encrypted offline data packet is generated, including reading permissions and authorization information, and is decrypted and read only through the unique document decryption method. Documents that exceed the secondment period will be automatically destroyed and in the document Draw dynamic watermarks to block printing, copying, and cutting functions.
Ensure the security of documents during the secondment process, prevent diffusion and leakage, realize multi-layer encryption and deadline control of seconded documents, and reduce the risk of document leakage.
Smart Images
Figure CN119494111A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of government procurement electronic archives loan, specifically a method for preventing proliferation based on the digitization of government procurement archives. Background Art
[0002] With the rapid development of electronic government procurement business, electronic documents related to government procurement have been transferred from offline to the government procurement electronic archive management platform for centralized storage and management, which better protects the integrity of government procurement electronic archives. However, with the traditional electronic archive loan method, after the loanee downloads the document to the local, the document cannot be effectively restricted and managed, and there is a risk of the document being transferred to other unauthorized persons, and there is a risk of the document being spread and leaked.
[0003] Based on existing technology, it is difficult to manage and constrain government procurement electronic documents downloaded to the user's local computer. It is impossible to restrict that only the seconded person has the authority to view them, nor is it possible to restrict the reading period. In particular, many businesses require reading control and limit the seconded person to only view certain parts of the document. Currently, the corresponding behavior can only be constrained through relevant systems, but there are many uncontrollable factors, and there are potential risks to the safe management of electronic files. Summary of the invention
[0004] The purpose of the present invention is to provide a method for preventing proliferation based on digitization of government procurement archives to solve the problems raised in the above-mentioned background technology.
[0005] To achieve the above object, the present invention provides the following technical solutions:
[0006] The method of non-proliferation based on the digitization of government procurement archives includes the following seven steps:
[0007] Step 1: The secondee of government procurement submits the secondment document application through the government procurement electronic archive management platform, and the electronic archive management personnel authorizes the secondee to download the corresponding documents;
[0008] Step 2: The secondee downloads the authorized document through the government procurement electronic archive management platform. During the download, an offline data package is generated through a unique document encryption method, and the reading permission of the corresponding document is encrypted and controlled. The data is written into the offline data package, and the corresponding authorization information is written into the offline data package;
[0009] Step 3: Encrypt the offline data packet using a unique document encryption method based on the secondee's certificate information, and generate an encrypted offline data packet that uniquely matches the secondee's certificate information;
[0010] Step 4: After the secondee downloads the encrypted offline data package to the local computer, it can be read only after it is decrypted by the unique document decryption method. The downloaded offline data package is imported by the unique document decryption method and decrypted according to the secondee's certificate information. If the secondee's certificate information is verified incorrectly, it will not be decrypted and an error message will be prompted. After the secondee's certificate information is verified correctly, the unique document decryption method will decrypt the offline data package.
[0011] Step 5: According to step 4, after decrypting the offline data package, it will be determined whether the offline data package is within the secondment period. If the secondment period has exceeded, the offline data package will be destroyed. If it is within the secondment period, the unique document decryption method will decrypt the offline data package and display the relevant documents.
[0012] Step 6: According to step 5, the relevant document directory is displayed after decryption using the unique document decryption method. The secondee selects the corresponding document and chapter to read. The reading will be controlled according to the authorization scope of the document chapter. Unauthorized chapters in the document cannot be read. The authorized chapters are decrypted and the content is displayed. The content of unauthorized chapters will be automatically blocked.
[0013] Step 7: Based on step 6, the unique document decryption method will automatically block the printing, copying, and cutting related functions when displaying the authorized chapter content. At the same time, a dynamic watermark will be drawn in the document and displayed to the secondee for reading.
[0014] Furthermore, in step one, the secondment document supports PDF, DOC, and DOCX document formats.
[0015] Furthermore, the authorization information written into the secondment document in step 2 includes the secondment validity period, watermark display information, and the secondee's document reading scope.
[0016] Further, the specific process of the unique document encryption program in step 2 is:
[0017] Step 2.1, generate an offline data package based on the downloaded document, and write the corresponding document directory and authorization information into the offline data package;
[0018] Step 2.2: Based on the control scope of the seconded document chapters, encrypt the corresponding document chapters according to the encryption algorithm, convert the document contents into binary form in turn, and write them into the offline data package;
[0019] Step 2.3: After the data is written, the relevant KEY information in the certificate will be obtained based on the secondee's certificate information, and the offline data packet will be encrypted according to the AES encryption algorithm.
[0020] Furthermore, the specific process of decryption in the unique document decryption method in step 4 is as follows:
[0021] Step 4.1: Decrypt the offline data package according to the AES algorithm based on the certificate information of the secondee. If the decryption fails, the secondee will be prompted that the decryption cannot be done. If the decryption succeeds, a stand-alone offline file library will be automatically generated.
[0022] Step 4.2: A security password will be added to the stand-alone offline file library to prevent the offline file library from being stolen;
[0023] Step 4.3: Parse the document information in the offline file library and display it to the secondee through a unique document decryption method.
[0024] Furthermore, the specific process of destroying the documents beyond the secondment period in step 5 is as follows:
[0025] Step 5.1: Read the authorization information after decryption of the offline data package using a unique document decryption method;
[0026] Step 5.2: The unique document decryption method compares the secondment period read with the current time. If the secondment period has not been exceeded, the document will be displayed normally. If the secondment period has been exceeded, the secondee will be prompted to destroy the relevant documents.
[0027] Step 5.3: After the secondee confirms according to the prompt, the unique document decryption method will automatically destroy the downloaded offline data package and the stand-alone offline file library according to the document path when the secondee imported the source file, and automatically close it.
[0028] Compared with the prior art, the beneficial effects of the present invention are: when a secondee downloads a document from the government procurement electronic archive platform, the secondee can download the relevant document for offline reading while ensuring the security of the document. When a secondee downloads a document from the government procurement electronic archive platform, the document is subjected to multi-layer security processing such as multi-layer encryption, secondment period control, and reading control, and is decrypted and read through the unique document decryption method of the present invention. Documents that exceed the secondment period will be automatically destroyed, which can effectively ensure the information security of the secondment document and greatly reduce the risk of document leakage. On the premise of meeting the needs of government procurement business scenarios, the security of the document is guaranteed at the same time. BRIEF DESCRIPTION OF THE DRAWINGS
[0029] Figure 1 The present invention is an overall flow chart of the method for preventing proliferation based on digitization of government procurement archives. DETAILED DESCRIPTION
[0030] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0031] In the description of the present invention, it should be noted that the terms "upper", "lower", "inner", "outer", "front end", "rear end", "two ends", "one end", "the other end" and the like indicate positions or positional relationships based on the positions or positional relationships shown in the drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as limiting the present invention. In addition, the terms "first" and "second" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.
[0032] In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "provided with", "connected", etc. should be understood in a broad sense. For example, "connected" can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.
[0033] Example 1
[0034] See also Figure 1 The embodiment provided by the present invention: a method for preventing proliferation based on the digitization of government procurement archives, comprising the following seven steps:
[0035] Step 1: The secondee selects the relevant documents to be seconded and submits an application. The electronic archive manager reviews the relevant secondment documents and authorizes the secondee to review the relevant chapters. The secondee is only allowed to review the first three chapters of a certain document. The electronic archive manager authorizes the first three chapters of the document. After the secondment application is authorized, the secondee can download the secondment document.
[0036] Step 2: The secondee selects the secondment document data to be downloaded through the government procurement electronic archive management platform and clicks to download. When downloading, the reading permission of the corresponding document will be encrypted and controlled through a unique document encryption program, and the corresponding authorization information will be written to generate an encrypted offline data package. The authorization information mainly includes the validity period of the secondment, watermark display information, and the secondee’s reading scope of the document. After the authorization information is written, the unique document encryption program generates a corresponding document directory based on the seconded document, and converts the document content into binary form in turn, and writes it into an encrypted offline data package. After the data is written, the offline data package will be encrypted according to the AES encryption algorithm based on the secondee’s certificate information. The encrypted data is transmitted to the secondee’s client through the network in the form of a binary stream and downloaded to the secondee’s local computer.
[0037] Step 3: After the secondee downloads the encrypted offline data package to the local computer, it must be decrypted and read through the unique document decryption method. The unique document decryption method needs to be installed locally on the secondee. The downloaded encrypted offline data package is imported through the unique document decryption method, and the offline data package is decrypted according to the secondee's certificate information. If the secondee's certificate information does not match, the file cannot be decrypted and the secondee is prompted with an error. After the secondee's certificate information matches correctly, the offline data package is decrypted. According to the secondee's certificate information, the offline data package is decrypted according to the AES algorithm. After the decryption is successful, a stand-alone offline file library is automatically generated, and a security password is added to the stand-alone offline file library to prevent the stand-alone offline file library from being stolen.
[0038] Step 4: After the secondee downloads the encrypted offline data package to the local computer, it can be read only after it is decrypted by the unique document decryption method. The downloaded offline data package is imported by the unique document decryption method and decrypted according to the secondee's certificate information. If the secondee's certificate information is verified incorrectly, it will not be decrypted and an error message will be prompted. After the secondee's certificate information is verified correctly, the unique document decryption method will decrypt the offline data package.
[0039] Step 5: According to step 4, after decrypting the offline data package, it will be determined whether the offline data package is within the secondment period. The authorization information of the document secondment period will be read through the offline data package and compared with the current time. If the secondment period has exceeded, the secondee will be prompted to destroy the relevant documents. After the secondee confirms according to the prompt, the source file of the offline data package and the stand-alone offline file library will be automatically destroyed and closed according to the document path when the secondee imported the source file. If it is within the secondment period, the relevant document directory will be displayed in a unique document decryption method;
[0040] Step 6: According to step 5, the relevant document directory is displayed after decryption. The secondee selects the corresponding document directory and chapter to read. The reading will be controlled according to the authorization scope of the document chapter. Unauthorized chapters in the document cannot be read. The unique document decryption method parses the authorized chapters and displays them. Unauthorized chapters will be automatically blocked. If the secondee selects an unauthorized chapter in an electronic document to read, the content of this chapter will be blocked and the secondee will be prompted that the content of this chapter cannot be read. If it is an authorized chapter in this document, the content of this chapter will be displayed after parsing;
[0041] Step 7: Based on step 6, when displaying the authorization chapter, the printing, copying, and cutting related functions will be automatically blocked. At the same time, a watermark will be drawn in the document and displayed to the secondee for reading.
[0042] Example 2
[0043] Step 2 of the method for preventing proliferation of digital government procurement archives in Example 1 is as follows:
[0044] Step 2.1: The secondee selects the secondment document data to be downloaded through the government procurement electronic archive management platform and clicks download. The secondee must have the authority to view and download the secondment document data applied for by the secondee;
[0045] Step 2.2: traverse the corresponding documents according to the download data selected by the secondee, and automatically create an offline data package according to the traversed documents;
[0046] Step 2.3: After the offline data package is created, the traversed document directory structure is converted into binary data and written into the offline data package. Then the corresponding authorization information is converted into binary data and written into the offline data package. The authorization information mainly includes the validity period of the secondment, watermark display information, and the scope of the secondee's reading of the document. The secondment validity period defaults to 7 days. The watermark display information is the authorization unit information. The secondee is the person who logs in to the government procurement electronic archive management platform to submit the application.
[0047] Step 2.4, after the authorization information is written, the reading permission is controlled chapter by chapter according to the chapter permissions that can be consulted in each document, the corresponding document chapters are encrypted according to the encryption algorithm, and the document content is converted into binary data in turn and written into the offline data package. The chapters that are allowed to be read will be encrypted with a reversible encryption algorithm, and the unauthorized chapters will be encrypted with an irreversible encryption algorithm;
[0048] Step 2.5: After the seconded document content is written, the certificate information of the secondee will be read. If the secondee's certificate information does not exist, it will prompt that the secondee's information is wrong. If the secondee's certificate information is verified to be legal, the offline data packet will be encrypted according to the secondee's certificate information and the AES encryption algorithm. After the encryption is completed, it will be converted into a binary data stream and transmitted to the client and downloaded to the secondee's local computer.
[0049] Step 4 of the method for preventing proliferation of digital government procurement archives in Example 1 is as follows:
[0050] Step 4.1: After the secondee downloads the offline data package to the local computer, the secondee imports the downloaded offline data package through the unique document decryption method. The unique document decryption method will read the secondee's certificate information and verify whether the secondee's certificate information is correct. If the secondee's certificate information is not correctly verified, an error message will be prompted. After the secondee's certificate information is correctly verified, the unique document decryption method will decrypt the offline data package.
[0051] Step 4.2: Decrypt the offline data package according to the AES algorithm based on the secondee's certificate information. If the decryption is successful, a stand-alone offline file library is automatically generated. A security password is added to the stand-alone offline file library to prevent the stand-alone offline file library from being stolen.
[0052] Step 5 of the method for preventing proliferation of digital government procurement archives in Example 1 is as follows:
[0053] Step 5.1: Read the authorization information after decryption of the offline data package using a unique document decryption method;
[0054] Step 5.2: The unique document decryption method compares the secondment period read with the current time. If the secondment period has not been exceeded, the document will be displayed normally. If the secondment period has been exceeded, the secondee will be prompted to destroy the relevant documents.
[0055] Step 5.3: After the secondee confirms according to the prompt, the unique document decryption method will automatically destroy the downloaded offline data package and the stand-alone offline file library according to the document path when the secondee imported the source file, and automatically close it.
[0056] It will be apparent to those skilled in the art that the invention is not limited to the details of the exemplary embodiments described above and that the invention can be implemented in other specific forms without departing from the spirit or essential features of the invention. Therefore, the embodiments should be considered exemplary and non-limiting in all respects, and the scope of the invention is defined by the appended claims rather than the foregoing description, and it is intended that all variations falling within the meaning and scope of the equivalent elements of the claims be included in the invention. Any reference numeral in a claim should not be considered as limiting the claim to which it relates.
Claims
1. A method for preventing proliferation based on the digitization of government procurement archives, characterized by: It includes the following seven steps: Step 1: The secondee of government procurement submits the secondment document application through the government procurement electronic archive management platform, and the electronic archive management personnel authorizes the secondee to download the corresponding documents; Step 2: The secondee downloads the authorized document through the government procurement electronic archive management platform. During the download, an offline data package is generated through a unique document encryption method, and the reading permission of the corresponding document is encrypted and controlled. The data is written into the offline data package, and the corresponding authorization information is written into the offline data package; Step 3: Encrypt the offline data packet using a unique document encryption method based on the secondee's certificate information, and generate an encrypted offline data packet that uniquely matches the secondee's certificate information; Step 4: After the secondee downloads the encrypted offline data package to the local computer, it can be read only after it is decrypted by the unique document decryption method. The downloaded offline data package is imported by the unique document decryption method and decrypted according to the secondee's certificate information. If the secondee's certificate information is verified incorrectly, it will not be decrypted and an error message will be prompted. After the secondee's certificate information is verified correctly, the unique document decryption method will decrypt the offline data package. Step 5: According to step 4, after decrypting the offline data package, it will be determined whether the offline data package is within the secondment period. If the secondment period has exceeded, the offline data package will be destroyed. If it is within the secondment period, the offline data package will be decrypted by a unique document decryption method and the relevant documents will be displayed; Step 6: According to step 5, the relevant document directory is displayed after decryption using the unique document decryption method. The secondee selects the corresponding document and chapter to read. The reading will be controlled according to the authorization scope of the document chapter. Unauthorized chapters in the document cannot be read. The authorized chapters are decrypted and the contents are displayed. The contents of unauthorized chapters are automatically blocked. Step 7: Based on step 6, the unique document decryption method will automatically block the printing, copying, and cutting related functions when displaying the authorized chapter content. At the same time, a dynamic watermark will be drawn in the document and displayed to the secondee for reading.
2. The method for preventing proliferation based on digitization of government procurement archives according to claim 1 is characterized in that: In the step 1, the secondment document supports PDF, DOC, and DOCX document formats.
3. The method for preventing proliferation based on digitization of government procurement archives according to claim 1 is characterized by: The authorization information written into the secondment document in step 2 includes the secondment validity period, watermark display information, and the secondee's reading scope of the document.
4. The method for preventing proliferation based on digitization of government procurement archives according to claim 1 is characterized in that: The specific process of the unique document encryption program in step 2 is as follows: Step 2.1, generate an offline data package based on the downloaded document, and write the corresponding document directory and authorization information into the offline data package; Step 2.2: Based on the control scope of the seconded document chapters, encrypt the corresponding document chapters according to the encryption algorithm, convert the document contents into binary form in turn, and write them into the offline data package; Step 2.3: After the data is written, the relevant KEY information in the certificate will be obtained based on the secondee's certificate information, and the offline data packet will be encrypted according to the AES encryption algorithm.
5. The method for preventing proliferation based on digitization of government procurement archives according to claim 1 is characterized in that: The specific process of decryption in the unique document decryption method in step 4 is as follows: Step 4.1: Decrypt the offline data package according to the AES algorithm based on the certificate information of the secondee. If the decryption fails, the secondee will be prompted that the decryption cannot be done. If the decryption succeeds, a stand-alone offline file library will be automatically generated. Step 4.2: A security password will be added to the stand-alone offline file library to prevent the offline file library from being stolen; Step 4.3: Parse the document information in the offline file library and display it to the secondee through a unique document decryption method.
6. The method for preventing proliferation based on digitization of government procurement archives according to claim 1 is characterized by: The specific process of destroying the documents exceeding the loan period in step 5 is as follows: Step 5.1: Read the authorization information after decryption of the offline data package using a unique document decryption method; Step 5.2: The unique document decryption method compares the secondment period read with the current time. If the secondment period has not been exceeded, the document will be displayed normally. If the secondment period has been exceeded, the secondee will be prompted to destroy the relevant documents. Step 5.3: After the secondee confirms according to the prompt, the unique document decryption method will automatically destroy the downloaded offline data package and the stand-alone offline file library according to the document path when the secondee imported the source file, and automatically close it.